Read the docs

Custom Tinymce Shortcode Button Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Custom Tinymce Shortcode Button Project records in CISA KEV

No Custom Tinymce Shortcode Button Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom Tinymce Shortcode Button 1 record LOW

Records

1 record in Custom Tinymce Shortcode Button · all components

TI-2022-01104 CVE-2022-1217 · GHSA-vprr-8w4v-cwhx

Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site Scripting

Priority LOW 29

The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-16 No fix listed CWE-79
Open these records in search →